Fallos del tipo CWE-680

112 resultados

Transbordamento de inteiro causando transbordamento de buffer

Ocorre quando um cálculo de inteiro transborda (excede o limite do tipo), gerando um valor pequeno ou negativo que é depois usado como tamanho de alocação ou índice de buffer. O código acredita ter espaço suficiente, mas na verdade alocou pouco ou até nada, permitindo escrita fora dos limites da memória.

Ejemplo

Uma função recebe dois inteiros de 32 bits (tamanho + overhead) que, quando somados, causam overflow e resultam em um valor pequeno. A alocação malloc(tamanho + overhead) aloca poucos bytes, mas o código copia dados grandes para esse buffer, sobrescrevendo memória adjacente.

Cómo mitigar

Valide os operandos antes de operações aritméticas que alimentam alocações de memória; use tipos inteiros maiores (64-bit) quando apropriado; aplique testes de saturação (verificar se a soma/multiplicação ultrapassaria o máximo permitido) antes de usar o resultado em malloc, memcpy ou indexação de arrays.

CVE-2024-6381MEDIUMMongoDB C Driver bson_strfreev may be susceptible to integer overflowEPSS 0.4%CVE-2024-2608HIGH`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows,EPSS 0.4%CVE-2024-21454HIGHInteger Overflow to Buffer Overflow in Automotive TelematicsEPSS 0.4%CVE-2024-58107HIGHBuffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2024-48877HIGHA memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A speciallEPSS 0.3%CVE-2025-53630HIGHInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufEPSS 0.3%CVE-2022-36765HIGHInteger Overflow in CreateHobEPSS 0.3%CVE-2024-55626LOWSuricata oversized bpf file can lead to buffer overflowEPSS 0.2%CVE-2024-57956LOWOut-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilEPSS 0.2%CVE-2026-81647MEDIUMOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2023-22305MEDIUMInteger overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of seEPSS 0.2%CVE-2026-19588MEDIUMInteger Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.EPSS 0.2%CVE-2023-22443MEDIUMInteger overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via EPSS 0.2%CVE-2023-33022HIGHInteger Overflow to Buffer Overflow in HLOSEPSS 0.2%CVE-2025-54623MEDIUMOut-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2026-43627HIGHllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() FunctionEPSS 0.1%CVE-2026-90783HIGHMKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer WraparoundEPSS 0.1%CVE-2023-28585HIGHInteger Overflow to Buffer Overflow in TZ Secure OSEPSS 0.1%CVE-2022-25705HIGHInteger Overflow to Buffer Overflow in ModemEPSS 0.1%CVE-2022-33248HIGHInteger overflow to buffer overflow in User Identity ModuleEPSS 0.1%